linneman labs
content
···
✓
verified
home
/ sandbox-escape
Sandbox-Escape
2026.05.13
Two Hops and a Shell on Ubuntu
Ubuntu’s userns AppArmor patch checks a pointer, not a property. Two profile hops chain a confined process to host root.